header-logo
Suggest Exploit
vendor:
Fake Hit Generator
by:
DigitALL
8.8
CVSS
HIGH
Remote File Upload
434
CWE
Product Name: Fake Hit Generator
Affected Version From: 2.1
Affected Version To: 2.1
Patch Exists: YES
Related CWE: CVE-2009-4456
CPE: a:fake_hit_generator:fake_hit_generator:2.1
Metasploit: https://www.rapid7.com/db/vulnerabilities/linuxrpm-RHSA-2010-0110/, https://www.rapid7.com/db/vulnerabilities/linuxrpm-RHSA-2009-1289/, https://www.rapid7.com/db/vulnerabilities/linuxrpm-RHSA-2009-1461/
Other Scripts: https://www.infosecmatter.com/nessus-plugin-library/?id=41313, https://www.infosecmatter.com/nessus-plugin-library/?id=41421, https://www.infosecmatter.com/nessus-plugin-library/?id=60735, https://www.infosecmatter.com/nessus-plugin-library/?id=44635, https://www.infosecmatter.com/nessus-plugin-library/?id=42015, https://www.infosecmatter.com/nessus-plugin-library/?id=57446, https://www.infosecmatter.com/nessus-plugin-library/?id=58325, https://www.infosecmatter.com/nessus-plugin-library/?id=45372, https://www.infosecmatter.com/nessus-plugin-library/?id=36943, https://www.infosecmatter.com/nessus-plugin-library/?id=38642
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2009

Fake Hit Generator Shell Upload Vulnerability

The vulnerability allows an attacker to upload a malicious file to the web server. The vulnerability exists due to insufficient validation of the file type that is being uploaded. An attacker can exploit this vulnerability by uploading a malicious file to the web server.

Mitigation:

The application should validate the file type before uploading it to the web server.
Source

Exploit-DB raw data:

# Exploit Title: Fake Hit Generator Shell Upload Vulnerability

# Date: 25.12.2009

# Author: DigitALL

# Greetz: Zombie KroNickq HackSpy and All 1923turk.biz Members

# Version: 2.1

# Dork: "Upload unique IP List:" and "The Ultimate Fake Hit Generator - BOOST YOUR ALEXA RANK"

# Application: Please Proxy List Upload ( Your Shell )

# Shell: /proxy/shell.php

# Shells Demo: http://site/alexa/proxy/xx.php

Navigation

Suggest Exploit

Services By CQR